nexus-elements-deposit

Warn

Audited by Snyk on Feb 18, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

  • Direct money access detected (high risk: 1.00). Yes. The skill is explicitly a crypto financial execution component. It requires a connected wallet, constructs and returns on-chain transaction details (to, data, value), builds calldata for a target protocol (example ABI for supply), handles token approvals, and uses sdk.swapAndExecute to perform swap+execute. These are specific blockchain transaction and wallet-invoking operations (wallet signing and token transfers), not generic tooling. That meets the definition of Direct Financial Execution (crypto/wallet/swap/transaction signing).
Audit Metadata
Risk Level
MEDIUM
Analyzed
Feb 18, 2026, 08:39 AM